Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/JKa4l4D05AO15KAEv9r9t5Qz3BE.roa
File:                     JKa4l4D05AO15KAEv9r9t5Qz3BE.roa (raw, json)
Hash identifier:          eFICff1b0f2IbJbZsspaSe8TI3+5xsMxC5oPFvRClSc=
Subject key identifier:   24:A6:B8:97:80:F4:E4:03:B5:E4:A0:04:BF:DA:FD:B7:94:33:DC:11
Certificate issuer:       /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial:       01927BB9E04F4ED3D2551E8E65D8999523FD
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/JKa4l4D05AO15KAEv9r9t5Qz3BE.roa
Signing time:             Fri 11 Oct 2024 13:17:11 +0000
ROA not before:           Fri 11 Oct 2024 13:17:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12859
IP address blocks:        176.61.130.0/24 maxlen: 24
                          2a00:e480:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:7b:b9:e0:4f:4e:d3:d2:55:1e:8e:65:d8:99:95:23:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
        Validity
            Not Before: Oct 11 13:17:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=24a6b89780f4e403b5e4a004bfdafdb79433dc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:49:30:af:59:35:25:3d:fc:43:00:1c:8d:a6:
                    75:2a:f8:5e:40:2b:f0:5a:52:53:04:6b:54:0b:6f:
                    fd:b3:e0:be:93:4d:d2:eb:1b:1d:a1:fb:9c:03:88:
                    bb:cb:68:09:9e:29:16:ac:08:42:50:75:c8:aa:73:
                    93:9a:6c:58:1d:4e:77:cb:4a:25:e8:ac:3e:16:30:
                    2a:e5:71:04:af:f1:8c:3d:02:85:ce:1c:fa:db:1b:
                    e2:fb:2d:2a:f1:d5:ff:4e:7f:1e:fb:98:df:93:b7:
                    e1:ce:20:c4:a3:31:51:63:3c:77:ee:32:7c:07:c3:
                    67:5c:b1:53:5e:cd:7b:cb:41:bd:9b:7d:fb:74:2c:
                    ba:9b:8c:9e:99:e5:b5:cb:5b:f5:f7:7d:9b:d1:4d:
                    dd:a5:4b:24:54:9f:1a:f7:2e:19:56:c7:33:5a:a8:
                    92:2c:5b:25:f7:b6:92:53:2f:ef:5e:f6:cb:50:bd:
                    e6:55:3e:c5:8a:13:2d:19:5e:e3:a3:51:dd:9e:f8:
                    46:94:4f:19:ab:0c:5d:9e:ff:67:f0:9d:03:71:03:
                    9e:4c:d2:fb:10:f7:6f:91:a1:14:a3:d7:eb:c4:be:
                    df:7d:14:51:94:21:e6:1d:aa:dc:27:7a:4e:7c:76:
                    72:27:27:0b:de:73:cc:ea:93:f0:0d:ff:c9:0a:b4:
                    99:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A6:B8:97:80:F4:E4:03:B5:E4:A0:04:BF:DA:FD:B7:94:33:DC:11
            X509v3 Authority Key Identifier:
                keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/JKa4l4D05AO15KAEv9r9t5Qz3BE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.61.130.0/24
                IPv6:
                  2a00:e480:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:f1:6a:29:ec:6a:0e:f1:5a:b1:22:9c:dd:dc:09:18:63:25:
         2b:69:24:38:cc:32:1c:7f:fc:e8:12:ca:49:07:03:5b:3e:7e:
         67:9b:9d:76:51:61:c6:a4:f9:d8:47:2c:28:42:54:85:9e:24:
         3e:eb:37:eb:36:db:10:b4:40:9c:6d:6a:0c:26:3e:87:f7:85:
         b7:e1:1e:a5:b5:1c:0c:4d:a3:96:e9:b7:84:ab:5d:6d:3d:b2:
         33:4b:ef:c2:9e:02:d5:c8:5f:be:e8:dc:25:c4:3d:9e:21:f6:
         83:33:24:8b:a4:e7:a6:a3:20:9e:70:04:bd:db:f1:84:17:45:
         38:f0:44:f4:71:07:1b:48:01:0c:57:ae:e5:5b:ad:61:3c:7a:
         be:ca:52:8d:08:61:4e:07:4e:d9:75:d6:67:64:8e:b2:c0:d1:
         9c:85:f0:b0:14:a2:ed:e5:a6:52:0e:81:c3:ff:af:ac:93:1b:
         07:89:17:54:9c:6c:83:e0:9d:26:86:a7:bd:f3:61:4d:fb:cc:
         cd:e4:69:ee:d9:6c:46:0a:49:a2:8c:04:62:aa:ad:ea:d7:0e:
         32:a2:8f:7d:34:47:7a:29:12:88:3e:5e:5a:4b:00:1e:1e:3b:
         4c:16:ed:f0:c2:2b:b8:e1:19:1b:44:e2:7d:cb:a7:90:74:45:
         e7:ba:f0:41
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZJ7ueBPTtPSVR6OZdiZlSP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNjBiMGE1NWE4N2E2NmU5MGE3NDYzYTAxZGE2NDE0ZmMw
MzRkM2QwHhcNMjQxMDExMTMxNzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGE2Yjg5NzgwZjRlNDAzYjVlNGEwMDRiZmRhZmRiNzk0MzNkYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUkwr1k1JT38QwAcjaZ1KvheQCvw
WlJTBGtUC2/9s+C+k03S6xsdofucA4i7y2gJnikWrAhCUHXIqnOTmmxYHU53y0ol
6Kw+FjAq5XEEr/GMPQKFzhz62xvi+y0q8dX/Tn8e+5jfk7fhziDEozFRYzx37jJ8
B8NnXLFTXs17y0G9m337dCy6m4yemeW1y1v1932b0U3dpUskVJ8a9y4ZVsczWqiS
LFsl97aSUy/vXvbLUL3mVT7FihMtGV7jo1HdnvhGlE8Zqwxdnv9n8J0DcQOeTNL7
EPdvkaEUo9frxL7ffRRRlCHmHarcJ3pOfHZyJycL3nPM6pPwDf/JCrSZpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCSmuJeA9OQDteSgBL/a/beUM9wRMB8GA1UdIwQY
MBaAFOJgsKVah6ZukKdGOgHaZBT8A009MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEt
ZDIyNjlmNDBmM2QzLzEvSkthNGw0RDA1QU8xNUtBRXY5cjl0NVF6M0JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEtZDIyNjlmNDBmM2Qz
LzEvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAsD2CMA8E
AgACMAkDBwAqAOSAAAEwDQYJKoZIhvcNAQELBQADggEBAIjxainsag7xWrEinN3c
CRhjJStpJDjMMhx//OgSykkHA1s+fmebnXZRYcak+dhHLChCVIWeJD7rN+s22xC0
QJxtagwmPof3hbfhHqW1HAxNo5bpt4SrXW09sjNL78KeAtXIX77o3CXEPZ4h9oMz
JIuk56ajIJ5wBL3b8YQXRTjwRPRxBxtIAQxXruVbrWE8er7KUo0IYU4HTtl11mdk
jrLA0ZyF8LAUou3lplIOgcP/r6yTGweJF1ScbIPgnSaGp73zYU37zM3kae7ZbEYK
SaKMBGKqrerXDjKij300R3opEog+XlpLAB4eO0wW7fDCK7jhGRtE4n3Lp5B0Ree6
8EE=
-----END CERTIFICATE-----